The following patch series implements a boolean datatype for use in a boolean expression as right-hand side of a relational. Based upon that, header existence matches are implemented for IPv6 extension and TCP option headers as well as an existence match of a FIB entry. Phil Sutter (5): Introduce boolean datatype and boolean expression exthdr: Add support for exthdr specific flags exthdr: Implement existence check fib: Support existence check doc: Document boolean type and applications doc/nft.xml | 134 ++++++++++++++++++++++++++++++++++++ include/datatype.h | 2 + include/expression.h | 3 + include/exthdr.h | 4 +- include/linux/netfilter/nf_tables.h | 1 + include/tcpopt.h | 3 +- src/datatype.c | 19 +++++ src/evaluate.c | 17 ++++- src/expression.c | 4 ++ src/exthdr.c | 39 ++++++++--- src/fib.c | 5 +- src/netlink_delinearize.c | 5 +- src/netlink_linearize.c | 1 + src/parser_bison.y | 54 +++++++++++++++ src/scanner.l | 5 ++ src/tcpopt.c | 11 ++- tests/py/inet/fib.t | 3 + tests/py/inet/fib.t.payload | 10 +++ tests/py/inet/tcpopt.t | 3 + tests/py/inet/tcpopt.t.payload.inet | 14 ++++ tests/py/ip6/exthdr.t | 19 +++++ tests/py/ip6/exthdr.t.payload.ip6 | 60 ++++++++++++++++ 22 files changed, 399 insertions(+), 17 deletions(-) create mode 100644 tests/py/ip6/exthdr.t create mode 100644 tests/py/ip6/exthdr.t.payload.ip6 -- 2.11.0 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
